$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json) Hash identifier: 6unhG1kUr8gZNmUd8RMwG1AcKbh/Hj8bAiJWBVCWOEY= Subject key identifier: 83:C2:88:15:EE:31:16:11:D8:EE:AD:41:6E:B5:09:7A:07:01:F2:6E Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft Manifest number: 01BE Signing time: Sat 19 Jul 2025 03:10:21 +0000 Manifest this update: Sat 19 Jul 2025 03:10:21 +0000 Manifest next update: Sat 26 Jul 2025 03:10:21 +0000 Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: yDsfi8UQhKJedt+Eva3xdnKFhWSoFmSuRAPZcSdFUVs=) 2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: 4FOvuF+lrbDRETyeVF9s3HBZnjQN5y+IfUmzH88TfmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Validity Not Before: Jul 19 03:10:21 2025 GMT Not After : Jul 26 03:10:21 2025 GMT Subject: CN=687b0c9d-90be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:aa:d0:1b:ac:b3:5a:75:ca:b4:c0:3a:c4: 04:43:43:4f:4f:df:ba:99:2a:d3:c4:79:90:4e:f3: 35:31:a3:01:8e:df:6e:90:1c:df:97:3f:cc:73:d8: 1c:60:45:c4:f7:ee:98:f8:79:e3:0f:e8:c6:b4:fe: 34:cc:d6:20:57:7c:50:f0:af:c4:e3:8b:ee:b0:34: 4d:37:45:a4:08:81:0f:6e:de:e4:61:30:a8:96:05: 3a:e0:d7:6c:f7:8a:d9:a8:46:eb:b3:38:e0:d7:b8: 04:5a:c6:03:81:f4:c3:ef:8f:0e:3b:03:8e:19:92: 01:7d:7c:59:e9:09:dc:00:0d:7e:2c:0b:f7:2c:0b: 68:f7:6a:f6:64:84:cc:e4:b7:89:9a:11:86:63:5e: 9a:ca:6c:12:fd:eb:34:67:8c:f7:ad:d6:da:6b:7d: 06:45:0f:d2:36:f8:0a:6c:3a:eb:61:dd:69:a0:bf: 87:90:cf:5e:da:8d:e3:52:a7:ac:a2:95:3c:1b:94: d1:64:18:ae:fc:c7:85:34:2d:d7:c7:9e:a8:2b:b9: 4e:af:53:4c:19:7b:10:8f:4f:9b:2e:16:20:98:fa: eb:d4:0b:19:7a:8c:67:30:ae:82:eb:83:17:45:9a: 94:f8:18:75:4e:76:7e:78:4f:44:47:e1:1d:78:8e: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C2:88:15:EE:31:16:11:D8:EE:AD:41:6E:B5:09:7A:07:01:F2:6E X509v3 Authority Key Identifier: keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:2b:f9:7f:0e:ed:ea:2d:e0:a8:95:4b:13:b0:0a:1f:32:2d: d1:77:73:2e:21:8f:68:b9:d7:cc:81:88:3c:0a:63:48:85:39: 5e:59:bf:f8:ed:55:63:26:da:a5:a0:73:9c:15:ba:a9:c2:9a: 38:cf:93:07:57:f5:80:77:b2:19:2a:e0:32:f2:11:1d:39:34: d3:56:ac:9d:e3:a2:6b:14:e3:a2:9b:bb:96:6b:a4:09:f2:c4: cf:d5:37:5c:c4:7d:c0:34:bf:d9:50:ed:5f:29:ec:8d:1b:93: 7d:66:d3:ca:73:f6:b0:12:41:79:4b:50:dd:02:4c:23:b4:50: 99:dc:50:b2:50:fd:9b:81:ed:8a:18:86:72:09:74:a9:28:35: df:89:2d:a8:28:18:9a:77:74:4f:2f:75:25:72:e4:61:6a:4e: 02:60:ec:a4:bf:4a:ca:2f:7b:96:c9:26:4a:91:ec:3d:74:75: fa:b0:5f:7e:cb:d2:60:df:01:87:5f:79:a8:d1:92:ed:dc:81: 8a:5a:3e:b7:34:43:eb:0d:10:d7:a9:0f:61:be:78:d4:66:4b: b9:b2:60:bd:56:6c:cf:fa:d3:fb:f7:ac:6f:f3:89:69:3e:10: 0b:62:4b:19:98:87:8b:5a:7e:fe:7c:39:a5:ae:a2:81:c4:82: 25:74:01:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5 MEY4NURERkUwHhcNMjUwNzE5MDMxMDIxWhcNMjUwNzI2MDMxMDIxWjAYMRYwFAYD VQQDEw02ODdiMGM5ZC05MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1baq0Buss1p1yrTAOsQEQ0NPT9+6mSrTxHmQTvM1MaMBjt9ukBzflz/Mc9gc YEXE9+6Y+HnjD+jGtP40zNYgV3xQ8K/E44vusDRNN0WkCIEPbt7kYTColgU64Nds 94rZqEbrszjg17gEWsYDgfTD748OOwOOGZIBfXxZ6QncAA1+LAv3LAto92r2ZITM 5LeJmhGGY16aymwS/es0Z4z3rdbaa30GRQ/SNvgKbDrrYd1poL+HkM9e2o3jUqes opU8G5TRZBiu/MeFNC3Xx56oK7lOr1NMGXsQj0+bLhYgmPrr1AsZeoxnMK6C64MX RZqU+Bh1TnZ+eE9ER+EdeI7m+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPCiBXu MRYR2O6tQW61CXoHAfJuMB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1 RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzNCMy9CREZFMThDQ0I1RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNa NjVmamc3eF9SaDJRLUYzZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSK/l/Du3qLeColUsTsAofMi3Rd3MuIY9oudfMgYg8CmNIhTleWb/4 7VVjJtqloHOcFbqpwpo4z5MHV/WAd7IZKuAy8hEdOTTTVqyd46JrFOOim7uWa6QJ 8sTP1TdcxH3ANL/ZUO1fKeyNG5N9ZtPKc/awEkF5S1DdAkwjtFCZ3FCyUP2bge2K GIZyCXSpKDXfiS2oKBiad3RPL3UlcuRhak4CYOykv0rKL3uWySZKkew9dHX6sF9+ y9Jg3wGHX3mo0ZLt3IGKWj63NEPrDRDXqQ9hvnjUZku5smC9VmzP+tP796xv84lp PhALYksZmIeLWn7+fDmlrqKBxIIldAFt -----END CERTIFICATE-----Generated at Sun Jul 20 06:47:43 2025 by rpki-client